The vulnerability of the Real demuxer plugin (real.c) in the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Real demuxer plugin real.c in the Media Player software VideoLAN VLC is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the MP4 demultiplexer in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or trigger a service denial.

The vulnerability of the MP4 demultiplexer in the VideoLAN VLC media player software is related to errors in checking the length of string containers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service denial-of-service attack using a specially...

The vulnerability of the Dirac and Schrodinger codecs in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Dirac and Schrodinger codecs in the VideoLAN VLC media player software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures...

The vulnerability of the Open function in the modules/demux/wav.c file of the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/wav.c file is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .WAV file...

The vulnerability of the ParseSSA function in the modules/demux/subtitle.c file of the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the ParseSSA function in the modules/demux/subtitle.c file of the Media Player software VideoLAN VLC is related to buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .ssa extension...

The vulnerability of the ReadMetaFromId3v2 function in the Media Player software VideoLAN VLC, which allows a hacker to cause a service failure

The vulnerability of the ReadMetaFromId3v2 function in the VideoLAN VLC media player’s code exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the VideoLAN VLC media player, related to resource management errors, allows a hacker to cause a service failure.

The vulnerability of the VideoLAN VLC media player lies in resource management errors. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially crafted Cinepak file...

CVE-2019-18278

When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...

CVE-2019-18278

When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...

Code injection

When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...

CVE-2019-18278

When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...

CVE-2019-18278

CVE-2019-18278 concerns VideoLAN VLC media player 3.0.8 on Windows when using libqt, where data from a faulting address can control code flow at libqt_plugin!vlc_entry_license__3_0_0f+0x... The core description in both the NVD entry and Red Hat advisory is consistent: the vulnerability relates to...

CVE-2019-18278

When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...

The vulnerability of the mkv::virtual_segment_c::seek() function in the VideoLAN VLC media player software allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the mkv::virtualsegmentc::seek function in the VideoLAN VLC media player software relates to its use after deallocation. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

The vulnerability of the mkv::event_thread_t() function in the VideoLAN VLC media player software allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the mkv::eventthreadt function in the VideoLAN VLC media player software is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service...

The vulnerability of the SeekIndex() function in the VideoLAN VLC media player software allows a hacker to manipulate data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the SeekIndex function in the VideoLAN VLC media player lies in its division by zero. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures...

The vulnerability of the DemuxInit() function in the VideoLAN VLC media player software allows a hacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the DemuxInit function in the VideoLAN VLC media player software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures by usin...

CVE-2019-2185

In VlcDequantH263IntraBlockSH of vlcdequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.1.1...

Ubuntu: Security Advisory (USN-4131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS : VLC vulnerabilities (USN-4131-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4131-1 advisory. It was discovered that VLC incorrectly handled certain media files. If a user were tricked into opening a specially-crafted file, a remote attacker could...